Pendle v2 (Part 2) audit

WatchPug2 Aug 2022Not recorded. See the report

WatchPug reviewed Pendle Finance (Pendle v2 (Part 2) audit) on 2 Aug 2022: 12 findings, 0 critical; 10 marked fixed, 2 acknowledged.

No open critical findings

Open the report Open Pendle Finance’s security record

Report hosted on GitHub.

Trustblock does not review code.

Findings12

Statuses are the security firm’s own, from its report.

Severity	Open	Acknowledged	Fixed
Critical	0	0	0
High	0	0	0
Medium	0	0	1
Low	0	2	9

MediumWrong implementation of PendleVotingControllerUpg#vote() will revert when there are pools that get more weights than beforeFixed

The report gives no description here.

LowAdding mainchain gaugeController into sidechainContracts is confusing and unnecessaryFixed

The report gives no description here.

LowAvoid unnecessary storage read can save gasFixed

The report gives no description here.

LowDuplicate event emissionsFixed

The report gives no description here.

LowExpired markets should be excluded from PENDLE rewards automaticallyFixed

The report gives no description here.

LowIt’s possible that the pool address can be the same on different networks, and we should avoid thatFixed

The report gives no description here.

LowPendleVotingControllerUpg.sol#_broadcastResults() Precision loss due to div before mulFixed

The report gives no description here.

LowUsers will not naturally update others’ activeBalanceFixed

The report gives no description here.

LowvePENDLE.sol Combine two external calls into one can save gasFixed

The report gives no description here.

LowVotingEscrowPendleMainchain#_broadcast() should refund the unspent crosschain message feeFixed

The report gives no description here.

Contracts in scope

No deployed address is recorded for this audit.

The report names a repository or files. Open the report to see its scope.

Part of Pendle Finance’s security record

Pendle Finance

Audits4 audits by 3 firmsLast audit Aug 2026, by WatchPug.

Critical findingsNo open critical findingsAcross the 4 reports, 1 critical finding was reported. It is marked fixed by the firm that reported it.

Open Pendle Finance’s security record

Security firm

WatchPug

1 project reviewed · 1 report · latest Aug 2026

See WatchPug’s audits

Something wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.